An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
7.2Hoch
CVE-2025-6965Integer Truncation on SQLite
Beschreibung
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Schwachstellentyp (CWE):
CWE-197
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| apple | ipados | < 26.0.0 | |
| apple | iphone os | < 26.0.0 | |
| apple | macos | < 26.0.0 | |
| apple | tvos | < 26.0.0 | |
| apple | visionos | < 26.0.0 | |
| apple | watchos | < 26.0.0 | |
| siemens | ruggedcom crossbow | < 5.8 | |
| Siemens | RUGGEDCOM CROSSBOW Station Access Controller (SAC) | < V5.8 | |
| Siemens | SIDIS Prime | < V4.0.800 | |
| SQLite | SQLite | < 3.50.2 |
Referenzen und Patches
- https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8 Patch
- http://seclists.org/fulldisclosure/2025/Sep/49 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/53 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/56 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/57 Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/58 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2025/09/06/1 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-225816.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-485750.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-765416.html
CPE-Treffer (NVD) (9)
cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*< 3.50.2cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*< 26.0.0cpe:2.3:a:siemens:ruggedcom_crossbow:*:*:*:*:*:*:*:*< 5.8cpe:2.3:a:siemens:sidis_prime:*:*:*:*:*:*:*:*< 4.0.800